bugtraq - RE: Caveat Lector: Beastie Boys Evil

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Fri, 18 Jun 2004 07:37:31 -0500
From: Chris Merkel <chrism@...-synthetics.com>
To: 'Dragos Ruiu' <dr@....net>,
	"'bugtraq@...urityfocus.com'" <bugtraq@...urityfocus.com>
Subject: RE: Caveat Lector: Beastie Boys Evil

FWIW, the Mike D said that he would have preferred that there were no DRM on
the album, but that it's a standard practice for all EMI releases. Check out
this post from BoingBoing:

http://www.boingboing.net/2004/06/11/new_beasties_disc_ha.html

(Besides, DRM is standard issue nowadays and quite easy to bypass for the
average bugtraq reader :-)

- Chris Merkel

-----Original Message-----
From: Dragos Ruiu [mailto:dr@....net] 
Sent: Wednesday, June 16, 2004 2:10 AM
To: bugtraq@...urityfocus.com
Subject: Caveat Lector: Beastie Boys Evil

Well I truly regret actually purchasing a copy of the new Beastie Boys album
to support them.

It seems that Capitol Records has some sort of new copy protection system,
that automatically, silently, installs "helpful" copy protection software on
MacOS and Windows as soon as you insert the CD into default systems.
I'm not sure exactly what it does yet, but I am sure regreting actually
purchasing said media now... they don't deserve my money if they choose to
pull stupid stunts like this. Installing software without your permission
sounds like viral malware behaviour to me. I certainly hope the AV companies
put signatures into their products for this crap.

They include some sort of uninstaller buried on there for Windows, but I see
no such thing for MacOS. If anyone has disassembled the aforementioned
malware already and can save us some time with instructions on how to remove
it... thanks in advance.

caveat emptor,
--dr

--
World Security Pros. Cutting Edge Training, Tools, and Techniques
Tokyo, Japan	Nov 11-12 2004  http://pacsec.jp
pgpkey http://dragos.com/ kyxpgp